Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2c87d-66d8-43ee-ae3c-1e725e3fb8ba.roa
File:                     63e2c87d-66d8-43ee-ae3c-1e725e3fb8ba.roa (raw, json)
Hash identifier:          IqLn72towJDFPHGkkolYLRTCtYpc8Ef9M3LK0GSaB2I=
Subject key identifier:   29:3A:47:4B:54:BF:FE:AB:9C:4A:53:68:69:A4:F6:FF:96:3B:BD:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CB8C3A953D0F43DEAB28B618A3CF27FB4D82513
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2c87d-66d8-43ee-ae3c-1e725e3fb8ba.roa
Signing time:             Thu 08 Oct 2026 01:04:35 +0000
ROA not before:           Thu 08 Oct 2026 01:04:35 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        66.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b8:c3:a9:53:d0:f4:3d:ea:b2:8b:61:8a:3c:f2:7f:b4:d8:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 01:04:35 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=2b1651f254c6ba6d1dd55e1a990238c687c4d853a9b447c37b6c05129bb2f8d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:e4:f5:5d:6c:97:f3:59:34:b9:c7:2b:16:
                    78:2c:23:12:83:d1:8d:97:78:57:b4:05:9d:8f:56:
                    10:21:a6:91:96:c4:7b:1e:36:23:9b:f2:89:71:0d:
                    15:af:e4:39:fe:72:30:d5:a4:a0:4d:09:a3:d6:1e:
                    51:4f:85:65:85:7e:4e:fe:d3:e0:d7:02:15:15:04:
                    b7:17:26:22:74:de:92:0f:d1:fa:00:f5:5c:03:59:
                    09:ea:71:df:a1:a1:0d:c3:c2:61:13:f3:62:84:c6:
                    f6:9f:d4:4b:48:90:b3:f2:99:ad:30:8c:c2:0a:86:
                    04:ac:3d:2a:b0:d3:62:40:69:84:f9:6b:31:b5:3b:
                    c3:15:31:1f:d7:86:01:60:e8:f0:67:35:1f:b4:36:
                    c9:b5:f7:26:b2:80:25:4e:e6:d8:6d:9b:53:c1:56:
                    49:a2:85:0a:48:67:b6:47:83:24:82:26:94:31:c8:
                    21:0e:bf:c3:a5:33:84:fa:22:44:ef:d1:51:5e:1e:
                    07:da:33:88:ff:9a:b5:c8:c7:06:a4:54:ed:91:c3:
                    32:c6:5f:2b:04:77:4b:8b:19:d8:29:0e:e8:84:c5:
                    20:ed:27:22:87:8d:03:54:74:fe:6a:47:1a:95:f5:
                    96:e1:c1:55:0d:9a:1f:68:4e:ff:36:4e:cc:77:53:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3A:47:4B:54:BF:FE:AB:9C:4A:53:68:69:A4:F6:FF:96:3B:BD:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2c87d-66d8-43ee-ae3c-1e725e3fb8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:b5:0d:6d:55:54:0e:88:e0:a7:f6:d2:25:1a:37:f4:cc:b6:
         d0:fd:a8:aa:28:20:ef:aa:c9:3e:dc:4a:7f:c9:e1:09:7e:bc:
         73:ed:45:8e:8b:bf:9b:d6:0e:9a:a7:9e:cd:08:79:f4:61:2c:
         08:bd:e6:15:1a:94:c5:0f:4d:2b:7e:94:49:73:24:28:ce:e8:
         23:82:b4:45:3a:30:99:fa:fa:9f:a2:1e:e5:8c:be:2f:d5:41:
         25:0d:f5:a7:4a:82:2d:f9:5e:df:9f:a9:62:5b:a3:03:68:4d:
         86:9e:2c:a6:32:ea:02:e8:74:a7:15:41:cf:35:64:85:4b:bd:
         16:31:c3:8d:f3:cc:65:25:ad:e4:70:3f:43:11:e1:0b:ab:b4:
         30:12:d6:06:f5:50:40:0d:50:db:b2:7f:00:b3:b2:da:63:18:
         cd:39:c0:38:a1:70:fd:a3:cf:fa:7d:c6:63:93:69:ff:f0:ea:
         85:80:7f:b4:3d:eb:29:9e:8a:03:27:94:35:f9:74:3b:27:40:
         04:e5:f5:06:ef:63:b9:7d:04:b3:d3:ce:67:f7:3a:8a:3e:1c:
         9d:06:56:0f:3b:8a:dc:42:3c:7f:4c:4d:49:25:75:5f:d4:fc:
         07:8a:9c:23:d1:be:d7:df:8b:2c:3d:9d:48:77:95:3f:24:21:
         17:a8:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:43:04 2026 by rpki-client